Considering the difficulties in managing information resources, discuss in scholarly detail why risk management should involve in the following elements to include threats, exposure associated with each threat, risk of each threat occurring, cost of controls, and assessment of their effectiveness.Describe in about 250 words and Please mention the source of references?